BreachRx
BreachRx provides an AI-powered cyber incident response management (CIRM) platform that coordinates security, legal, privacy, and executive teams during breaches. Founded in 2021 in San Francisco, it serves Fortune 500 and publicly traded customers across financial services, healthcare, and critical infrastructure.
- Company typePrivate
- Founded2021
- HeadquartersSan Francisco, United States
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What BreachRx does
BreachRx is a SaaS provider of Cyber Incident Response Management (CIRM) software, founded in 2021 and headquartered in San Francisco. The company's Rex Platform coordinates security, legal, privacy, IT, communications, and executive stakeholders during cyber incidents, replacing ad-hoc coordination with structured workflows, evidence capture, and audit-ready documentation. Core product surface includes Rex AI (a patent-pending agentic AI layer with a Maestro orchestrator routing between specialized agents), Cyber RegScout (a regulatory intelligence module covering more than 200 global breach notification and privacy regulations), Mobile Command (an executive-facing mobile application for incident decisions), and IR Exercises for continuous preparedness. A recently introduced CIRM Warranty pairs the platform with up to $3 million in financial protection underwritten by a global insurance carrier, distinguishing the offering from pure-software incident response tools.
The company sells primarily to enterprise customers — Fortune 500 and publicly traded organizations in financial services, healthcare, and critical infrastructure — through direct field sales, with annual subscriptions and quote-based pricing tied to enterprise scope. Reported customer count exceeds 70, supported by named deployments such as Abacus Insights in healthcare. BreachRx has raised approximately $21.5 million in total funding across a $6.5M seed round (April 2024) and a $15M Series A (2025) led by Ballistic Ventures, and operates with 11-50 employees. Twelve-plus native integrations with collaboration and ITSM tools (Slack, Microsoft Teams, Jira, PagerDuty, and others) embed the platform in customer operational environments. Advisory and board ranks include former senior security and risk executives from Facebook, Uber, Google, RSA, and Mandiant, lending category credibility at the enterprise tier.
BreachRx firmographics
Firmographics- Name
- BreachRx
- Legal name
- BreachRx, Inc.
- Website
- https://breachrx.com
- Company type
- Private
- Founded year
- 2021
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- BreachRx provides an AI-powered cyber incident response management (CIRM) platform that coordinates security, legal, privacy, and executive teams during breaches. Founded in 2021 in San Francisco, it serves Fortune 500 and publicly traded customers across financial services, healthcare, and critical infrastructure.
- Ownership category
- akta.pro rank
BreachRx industry classification
Industry- Product category
- Cyber Incident Response Management (CIRM)
- NAICS
- Software Publishers (513210), Custom Computer Programming Services (541511)
- SIC
- Services-Computer Programming Services (7371), Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Security Incident Response (IR) & Digital Forensics Services (BPAEADAI)
- akta.pro secondary industry
- Responsible AI, Security & Privacy Platforms (Safety, Guardrails, PII) (HDAEANAG)
Keywords
Where BreachRx is headquartered
LocationHeadquarters
- HQ city
- San Francisco
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
BreachRx business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations
Revenue model
- SaaS Subscription (Platform Licenses): BreachRx operates as a SaaS platform with subscription-based licensing. The service is sold as enterprise software with annual subscription terms (12-month initial service terms with automatic renewal). Pricing is quote-based and tailored to enterprise requirements including number of users, modules deployed, and organizational scale. The platform is sold directly through the company's enterprise field sales team.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise SaaS platform with multiple modules (CIRM, Rex AI, Cyber RegScout, Mobile Command, IR Exercises) sold via annual subscription. |
Go-to-market motion1 record
Distribution channels1 record
Marketing channels7 records
BreachRx product offering
Product offeringCore offering
BreachRx sells an enterprise Cyber Incident Response Management (CIRM) platform, branded as the Rex Platform, that coordinates security, legal, privacy, IT, communications, and executive leadership during cyber incidents through structured workflows, embedded agentic AI (Rex AI), regulatory intelligence across 200+ regulations, and audit-ready evidence capture. The platform is sold as annual SaaS subscriptions to enterprise customers and is bundled with the industry's only $3M CIRM Warranty for liability protection.
Product overview
BreachRx offers a unified platform-plus-modules architecture centered on the Rex Platform™ for Cyber Incident Response Management (CIRM). The core platform serves as the foundational infrastructure, embedding Rex AI® (agentic/generative AI) across all layers. Five integrated solutions sit atop the platform: CIRM (the primary incident response management solution), IR Exercises (cross-functional simulation), Cyber RegScout® (regulatory intelligence covering 200+ regulations), Mobile Command (mobile executive dashboard), and the CIRM Warranty ($3M financial protection). The architecture is designed to unify security, legal, privacy, IT, communications, and executive stakeholders into a single system of record for coordinated, defensible enterprise-wide incident response.
Differentiator
Problem solved
Functional benefit
Products and services
- Rex Platform The foundational AI-powered platform for enterprise-wide cyber incident response management (CIRM). Unifies security, legal, privacy, IT, communications, and executive leadership in one system of record, embedding defensibility into response execution through structured workflows, continuous evidence capture, privileged communications, and embedded regulatory intelligence. For enterprise security, legal, and executive teams managing complex cyber incidents.
- Cyber Incident Response Management (CIRM) BreachRx's primary enterprise incident response solution powered by the Rex Platform. Elevates incident response from a technical scramble to an enterprise-wide coordinated process, aligns stakeholders across security, legal, privacy, IT, communications, and executive teams, embeds compliance, creates audit-ready documentation, and is backed by the industry's only CIRM Warranty. For CISOs, General Counsels, and security leaders at Fortune 500 and publicly traded enterprises.
- Rex AI Patent-pending agentic AI embedded directly into the Rex Platform for incident response. Provides real-time guidance, contextual awareness, automated task generation, playbook adaptation, and decision support, reducing coordination overhead and enabling disciplined execution under pressure. Includes a central Maestro agent that routes work between specialized agents for incident command, response execution, regulatory research, and readiness activities. For enterprise security and incident response teams.
- Cyber RegScout Regulatory intelligence tool that automatically identifies applicable cybersecurity and privacy regulations from a database of 200+ frameworks, prioritizes requirements by risk, and surfaces disclosure deadlines and required notification formats across jurisdictions. Reduces regulatory analysis from days to minutes and connects insights directly into incident workflows. For compliance, legal, and incident response teams at regulated enterprises.
- Incident Response Exercises Continuous preparedness solution that replaces annual tabletop exercises with structured, cross-functional simulations run on the same Rex Platform used in live incident response. Features adaptive injects, evolving scenarios, and agentic AI-guided guidance that translates exercise insights directly into improved workflows. For enterprise security, legal, and operational readiness teams.
- Mobile Command Mobile app extension of the CIRM platform providing C-suite executives with real-time visibility into active incidents directly from their mobile device. Delivers curated incident dashboards, live snapshots, and executive-aligned updates without operational overload. For CISOs, CEOs, General Counsels, and other executives overseeing enterprise incident response.
- CIRM Warranty Industry's only cyber incident response management warranty providing up to $3 million per claim in personal and corporate liability protection for incidents managed through the BreachRx CIRM platform. Covers defense costs, fines, penalties, and negligence-related claims with zero retention or deductible. Protects CISOs, CEOs, General Counsels, and named employees of customers. Available automatically to existing customers at no additional cost; underwritten by a leading global insurer.
Quantifiable outcome
- Organizations can reduce regulatory analysis from days to minutes using Cyber RegScout's automated compliance mapping.
- +2 more outcomes
Companies that use BreachRx
Customer profileNamed customers1 record
Segments3 records
Ideal customer profiles2 records
BreachRx technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration16 records
AI capability4 records
Feature6 records
BreachRx partnerships and signals
Strategic signalPartnerships
Eight partnerships are on record, tiered core.
- SlackcoreSlack integration allows BreachRx users to initiate incidents directly from Slack channels, enabling teams to launch incident workflows from existing communication tools. Slack is one of the primary notification and collaboration integrations in the Rex Platform ecosystem.
- Jira (Atlassian)coreJira integration is available on the Atlassian Marketplace, enabling teams to orchestrate and track incident response tasks within existing Jira workflows.
- Microsoft TeamscoreMicrosoft Teams integration enables BreachRx to deliver incident updates, tasks, and deadline notifications directly within Teams channels for enterprise coordination.
- Cortex XSOAR (Palo Alto Networks)coreCortex XSOAR integration is available on the Palo Alto Networks Cortex Marketplace, enabling SOAR-driven orchestration to connect with BreachRx's incident response management capabilities.
- PagerDutycorePagerDuty integration enables BreachRx to route incident notifications and escalations through PagerDuty's incident management platform.
- OktacoreOkta integration provides SSO and authentication for BreachRx platform access within enterprise identity management environments.
- Microsoft Entra IDcoreMicrosoft Entra ID integration provides identity and access management for BreachRx enterprise deployments.
- Google WorkspacecoreGoogle Workspace integration enables BreachRx to operate within enterprise Google environments for authentication and collaboration.
Scale indicators4 records
Recent moves6 records
Expansion highlights6 records
BreachRx competitors and assessment
Company assessmentEmerging players
- ProcessUnity: ProcessUnity provides a GRC platform with third-party risk and operational risk capabilities, including incident response workflow modules. Comparable to BreachRx at the intersection of risk management and incident coordination, though ProcessUnity's primary focus is third-party risk.
- Resolver (Kroll): Resolver, now part of Kroll, offers incident management and GRC software for enterprise risk and compliance teams. Comparable to BreachRx in handling incident response workflows with cross-functional coordination, though Resolver's scope extends across broader enterprise risk use cases.
- LogicGate Risk Cloud: LogicGate Risk Cloud is a no-code GRC platform that includes incident management and risk workflows. Comparable to BreachRx in addressing enterprise risk and incident coordination, but LogicGate's scope is broader GRC rather than purpose-built CIRM.
Direct peers
- Tines: Tines offers a no-code automation platform widely used by security and IT teams for incident response orchestration. Comparable to BreachRx in automating cross-functional workflows during security incidents, though Tines is a broader automation tool rather than a domain-specific CIRM solution.
- Swimlane: Swimlane provides a low-code security orchestration platform focused on incident response automation. Comparable to BreachRx as both serve enterprise security operations teams with workflow automation and incident coordination capabilities across the security stack.
Broad incumbents
- OneTrust: OneTrust is a broad privacy, security, and governance platform with incident response and breach notification capabilities. Comparable to BreachRx in addressing regulatory obligations during data breaches, though OneTrust spans a much wider privacy and trust management portfolio.
- Splunk SOAR (formerly Phantom): Splunk SOAR is a leading security orchestration platform within Splunk's broader security operations suite. Comparable to BreachRx as both target enterprise incident response workflows, though Splunk SOAR focuses more narrowly on security team automation rather than enterprise-wide CIRM.
- Palo Alto Networks (Cortex XSOAR): Cortex XSOAR is a market-leading security orchestration, automation, and response (SOAR) platform. Directly comparable to BreachRx because both target incident response workflows with cross-team orchestration, and BreachRx has a native XSOAR integration indicating overlap in customer environments.
- ServiceNow Security Incident Response: ServiceNow's Security Incident Response module sits within its broader ITSM platform and coordinates security and IT workflows during incidents. Comparable to BreachRx in orchestrating cross-functional incident response, though ServiceNow approaches it as part of a general-purpose workflow platform.
- IBM Resilient (X-Force IRIS): IBM's Resilient Incident Response Platform (now part of X-Force IRIS) is an established enterprise incident response orchestration product. Comparable to BreachRx as both address cross-functional incident coordination and regulatory compliance during breach response at large enterprises.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks7 records
Key highlights7 records
Customer concentration
BreachRx social profiles
Digital presenceBreachRx financial estimates
Financial estimateRevenue estimate
Valuation estimate
BreachRx leadership team
Management profileNumber of profiles
Profiles10 records
BreachRx funding detail
Funding detailFunding overview
Funding rounds3 records
Investors6 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
BreachRx M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about BreachRx
What does BreachRx do?
BreachRx sells an enterprise Cyber Incident Response Management (CIRM) platform, branded as the Rex Platform, that coordinates security, legal, privacy, IT, communications, and executive leadership during cyber incidents through structured workflows, embedded agentic AI (Rex AI), regulatory intelligence across 200+ regulations, and audit-ready evidence capture. The platform is sold as annual SaaS subscriptions to enterprise customers and is bundled with the industry's only $3M CIRM Warranty for liability protection.
Is BreachRx a public or private company?
BreachRx is a private company. It is classified as venture growth investor backed and is currently operating.
When was BreachRx founded?
BreachRx was founded in 2021. It employs 11 to 50 people.
Where is BreachRx based?
BreachRx is headquartered in San Francisco, United States, in the North America region.
How does BreachRx make money?
One revenue line is on record: saaS Subscription (Platform Licenses).
Who are BreachRx's main competitors?
Emerging players on record are ProcessUnity, Resolver (Kroll) and LogicGate Risk Cloud. Direct peers are Tines and Swimlane. Broad incumbents are OneTrust, Splunk SOAR (formerly Phantom), Palo Alto Networks (Cortex XSOAR), ServiceNow Security Incident Response and IBM Resilient (X-Force IRIS).
Does BreachRx have an API?
No public API is recorded for BreachRx.
What industry is BreachRx in?
BreachRx's product category is Cyber Incident Response Management (CIRM). Its primary akta.pro industry code is BPAEADAI, Security Incident Response (IR) & Digital Forensics Services, with a secondary code of HDAEANAG, Responsible AI, Security & Privacy Platforms (Safety, Guardrails, PII). Its NAICS code is 513210 and its SIC code is 7371.